From de869080be4ba3d2aa852cca3b4efc50820b35c0 Mon Sep 17 00:00:00 2001 From: Max Date: Fri, 1 Mar 2019 09:49:49 +0100 Subject: [PATCH] Added description for added ASN options. --- wolfcrypt/src/asn.c | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/wolfcrypt/src/asn.c b/wolfcrypt/src/asn.c index 93b4c4c2a..274d868a2 100644 --- a/wolfcrypt/src/asn.c +++ b/wolfcrypt/src/asn.c @@ -47,6 +47,13 @@ ASN Options: * WOLFSSL_SMALL_CERT_VERIFY: Verify the certificate signature without using DecodedCert. Doubles up on some code but allows smaller dynamic memory usage. + * WOLFSSL_NO_OCSP_DATE_CHECK: Disable date checks for OCSP responses. This + may be required when the system's real-time clock is not very accurate. + It is recommended to enforce the nonce check instead if possible. + * WOLFSSL_FORCE_OCSP_NONCE_CHECK: Require nonces to be available in OCSP + responses. The nonces are optional and may not be supported by all + responders. If it can be ensured that the used responder sends nonces this + option may improve security. */ #ifndef NO_ASN